Effect of Intensity Modulator Extinction 
on Practical Quantum Key Distribution System 
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We study how the imperfection of intensity modulator effects on the security of a practical quan- 
tum key distribution system. The extinction ratio of the realistic intensity modulator is considered 
in our security analysis. We show that the secret key rate increases, under the practical assumption 
that the indeterminable noise introduced by the imperfect intensity modulator can not be controlled 
by the eavesdropper. 



I. INTRODUCTION 



Quantum key distribution(QKD) is a peculiar tech- 
nology that guarantees two remote parties, Alice and 
Bob, to share a secret key which is prevented from eaves- 
dropping by physical laws. Since the first QKD proto- 
col, namely the BB4 protocol, was proposed by Bennett 
and Brassard in 1984Q, QKD has become the primary 
application of quantum information science. The un- 
conditional security of QKD, which is the biggest ad- 
vantage of this technology, have already been proven in 
both discrete- variable protocols (0-0|) and continuous- 
variable protocols [§4i"ol]. However, some assumptions in 
these proofs are not removable. For instance, the single- 
photon detectors (SPD) are usually considered to be un- 
responsive to bright lights in the linear mode, but it is 
not true. In Ref.[llj]. the authors experimentally prove 
that the SPD click can be triggered by bright light when 
the SPD is working in linear mode, therefore a detector- 
blind-attack is proposed and used to hack the commercial 
QKD systems successfully. For this reason, it is very im- 
portant to analyze how the imperfect devices effect on 
the security of a practical QKD system, and the anal- 
ysis of the security in practical QKD systems attracts 
much attention recently jljj. For examples, the decoy 
state method proposed by Hwang [l| has developed as 
a powerful tool to analyze the imperfect single-photon 
source and achieve the modified secret key rate [14T - [l6l |. 
and the effect of imperfect phase modulator has also 
be studied by an equivalent model in[T3, EH- However, 
many imperfections are still not considered before. In 
this paper, we analyze the finite extinction of imperfect 
intensity modulator (IM) in the practical QKD system. 
Our simulation result shows that surprisingly, the extra 
noise introduced by the realistic IM reduces Eve's infor- 
mation and increases the secret key rate. 




, |H> 










4X1 




Coupler 











FIG. 1: The scheme diagram of producing states 
\H), \V), \+}and\-}. LD: Laser Diode; BS: Beam Splitter; IM: 
Intensity Modulator; Encoder(l-4): Polarization modulator 
or Mach-Zehnder interferometer, corresponding to the proto- 
col's requirement; RPM: Random Phase Modulator. The two 
couplers are used for splitting and recombing the laser pulses. 



QKD systems [19|. 

In this scheme, the laser pulse generated by the laser 
diode is first attenuated to the single photon level, which 
can be written as a weak coherent state |/i)(/i ~ 0.2), 
where /i is the amplitude of light. This state is then 
split by a coupler into four paths, which are described 
as a, b, c and d. After the random phase modulat- 
ing and encoding, the coherent state becomes — > 



(\e^^ a ,H + \e^^) b ,v + \e ie ^) c , + + \ 



.), where 



8a.b,c,d denote the additional random phases. The inten- 
sity modulators(IM) are then used to filter out the com- 
ponents of the state that we do not need. Depending on 
the electro-optic effect, we can control the attenuation of 
IM by supplying an appropriate voltage on it. The state 
of IM is denoted as " off" when it has high attenuation and 
"on" when it has nearly no attenuation. The amplitude 



of light is attenuated by a factor of \/Poff or \JP on when 
the state of IM is off or on, and the power of the output 
light is I a ff = P jfh or I on = P on Io respectively, where 
= If | 2 denotes the power of the input light. Then the 
extinction ratio of IM can be defined as 1201: 



II. PRELIMINARY 

In the BB84 protocol, Alice randomly encodes {0, 1} 
into the rectilinear basis {\H), \ V)} or the diagonal basis 
{|+>, |-)}, where (H\V) = and |±) = ^(\H) ± \V)). 
She can produce these states by using the scheme de- 
scribed in Figured, which is applicable to the high speed 



loSS ' 



(1) 



For simplicity, we assume the four IM have the same ex- 
tinction ratio. Without loss of generality, we suppose 
that Alice produces the signal state \H). Note that only 
the single photon state can take part in the secret key 
generation p|, we consider the single photon state di- 
rectly. After the 4x1 coupler, the single photon state 
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FIG. 2: The equivalent model diagram of the state generation 
process. OS is an optical switch that randomly routes Pideal 
or p n oise to the channel with £=| or ^ probability. p We ai , 
pnoise. and r are defined in the text. 



at the output port can be written as (see the Appendix 
section for more details): 



PH 



= c - (F °" +3 f°^ [ (P°,,+3P //)A 



(2) 



After normalizing, the single photon part of any signal 
state produced by this modulation process can be gener- 
ally written as: 



— r ~ 1 

P signal — r+3 Pideal 
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r _i_3 Pnoise • 



(3) 



Where pideal denotes the pure signal state (\H)(H\, 
\V){V\, l+X+l or |-)(-|), and p nolse = \l is the density 
matrix of the extra noise introduced by the finite extinc- 
tion ratio of IM. Figure. 2 shows the equivalent model 
description of the state generation process. 



III. SECURITY PROOF 



amount of information is sacrificed to perform privacy 
amplification[7[ . 

As we have analyzed in section 2, the imperfection of 
IM introduce extra noises, therefore the QBER should 
be modified as: 

ei=ei-^ + ^43=(l-^l + 43- ( 5 ) 

The second part of the right hand side of this equation is 
due to the 50% error rate introduced by p no ise- Note 
that the identity matrix remains unchanged under all 
unitary operations, so that Eve can not achieve any useful 
information by performing any operation on it. Therefore 
this part of errors are impossible to be introduced by Eve. 
For this reason, only a fraction (1 — ^tj) of the sifted key 
need to perform the privacy amplification process 0- We 
rewrite e\ as a function of e\ from Eq.([5]): 



ei l-2p' 



(6) 



Where p = The modified secret key rate can now 

be written as follow: 



R, = l- H(e x ) - (1 - 2p)H{e } ) 
= l-H(e[)-(l-2p)H(^). 



(7) 



B. BB84 protocol with decoy state method 

For preventing the photon number splitting(PNS) at- 
tack, decoy state method is an essential tool in practical 
QKD systemfll The secret key rate of the BB84 
protocol with decoy state method is given by[l5l]: 

Rd = q{-Qaf{E a )H{E a ) + Qi[l - H(e¥)}}; (8) 



In this section, we prove the security of the practical 
QKD system using the state generation scheme described 
in Fig.l. We first analyze the security in the case of BB84 
protocol with ideal single photon state, and then gener- 
alize our result by combining the decoy state method. 



A. BB84 protocol with single photon state 

The secret key rate of BB84 protocol with ideal single 
photon state can be written as[ 



R s = 1 - iT(ei) - H(ei). 



Where e\ is the quantum error bit rate(QBER) caused 
by the noises in the channel and detectors, and H (x) = 
— xlog2X— (1 — x)log2(l — x) is the Shannon entropy func- 
tion. In the security analysis, all of the errors are consid- 
ered to be introduced by Eve when she tries to achieve 
secret key information from the signal state. Equa- 
tion (0| shows that a fraction H{ei) of the sifted key 
is sacrificed to perform error correction, and the same 



Ha — Zji=0 - r * e i\ i 



(9) 



Where q is the efficiency of the protocol which equals | 

in the BB84 protocol, 

Yi is the yield of an i-photon sate, 

Qn is the gain of the signal states, 

E a is the average QBER, 

ei is the QBER caused by the i-photon state, 

eY is the upper bound of ei , 

f(x) is the bidirectional error correction efficiency as a 



(4) function of error bit rate[22|. e{ can be estimated by[l| 



JJ _ e Y +e det <,ctn 
'1 Yb+Tf 



(10) 



Where rj is the detection efficiency of the QKD system, 
eo = | is the error bit rate caused by the vacuum state 
and edetect is the error bit rate caused by the system 
imperfection, which includes the error bit rate introduced 
by the imperfect IM. These two parameters can both be 
obtained from the field test experiments(e.g. [23|). 
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FIG. 3: The simulation result of the modified secret key rate 
in the case of using ideal single photon state. The modified 
result in our analysis which has the maximum tolerable QBER 
of 11.37% is described in blue line, comparing to the one using 
the GLLP method ItJ, which is described in red line. In this 
simulation, the extinction ratio of IM is assumed to be 27dB. 

Using Eq.(|6]), we get the error bit rate introduced by 
the ideal single photon state pideai in Eq.([3]) as: 

^detect ~ 1 — 2p 

JJ , ^ + (ede te c t -ph/(l-2p) _ A I 11 ) 
e l -> Y +r, ~ e l- 

Using the similar method in section 3.1, we achieve the 
modified secret key rate of BB84 protocol with the decoy 
state method by considering the effect of IM extinction 
ratio as follow: 

R d = q{-Q»f(E»)H(E») + Qi( Yo+ £-* p)TI )H(ei)}. 

(12) 

IV. SIMULATIONS 

Fig. 3 and Fig. 4 show the numerical simulations of 
Eq.© and Eq. (fT2"]) respectively. Here we assume the 
extinction ratio of IM to be 500(27dB), which is a rea- 
sonable value depending on the testing result of the IM 
in our field test experiment 23] . In Fig. 3, we simulate 
the relation between secret key rate and QBER in BB84 
protocol with ideal single photon state. We find that the 
maximum tolerable QBER increases to 11.37%, compar- 
ing with 11% when using the GLLP method. Because 
the background noises caused by the imperfect IM al- 
ways exist, the QBER labeled on lateral axis does not 
start at zero. 

In the case of BB84 protocol with the decoy state 
method, we simulate the relation between secret key rate 
and transportation distanc e by using the key parame- 
ters for QKD experiment in[23j. Fig. 4 shows that in our 
analysis the maximum secure transportation distance is 
120.6km, comparing to 119.9km by using the previous 
analysis method[l6|. and the secret key rates we achieved 
in [23[ increase 3% - 4% (see table 1) in the modification. 



10" 6 




10 8 - 



118 119 120 121 

Transportation Distance (km) 

FIG. 4: The simulation result of the modified secret key rate 
in the case of using decoy state method. The red line describes 
th e op timal estimation of the secret key rate using the method 
in [la] and experiment data in[23]. By considering the extra 
noise introduced by the imperfect IM, the estimation of secret 
key rate using the modified method in our paper which is 
described in blue line. In this simulation, the extinction ratio 
of IM is 27dB. 

TABLE I: The secret key rates calculated by 23] and modi- 
fied by this paper, in units of kbit/s. The items in the first 
row denote the different communication channels of the QKD 
network stated in [231 ]. 

QKD Channels A2R2B A2R2C D2R2A E2R2A 

Secret key (in [23]) 4.91 2.02 1.82 0.41 

Secret key (in this paper) 5.09 2.09 1.88 0.43 



V. CONCLUSION 

The effect of the IM extinction on practical QKD sys- 
tem is analyzed in paper. We surprisingly found that 
Eve loses more information than Alice and Bob in the 
process of realistic intensity modulation. We improved 
the lower bound of secret key rate of BB84 protocol with 
ideal single photon state and decoy state method respec- 
tively, and compare them to the previous security anal- 
ysis in numerical simulation. Our study makes an effort 
to consummate the security analysis of the realistic de- 
vices in practical QKD systems. Moreover, the security 
of the other realistic devices can also be analyzed by the 
approach we derived in this paper. 
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FIG. 5: The 4x1 coupler used in polarization encoding. 
PBS: Polarization Beam Splitter; BS: Beam Splitter. The 
four paths of the BS are denoted by A, B, C and D. The four 
input coherent states are defined in the text. 



and = /3(e 48c ajy + e l9d a.y) in the above expressions. 
The coherent states before inputting to the beam splitter 
can be written in direct product form as follows: 



e 2 E„=o ■ 

^+3^ (At)"(flt r 
— e l^n,m=0 n\m\ l UU / 



too (A' ) 



■|0>A®e-"-££=o 



■|0)j 



(14) 

At the output ports, the beam splitter transforms each 
term of the above operator polynomial into: 
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Appendix 

Here we derive the expressions of Eq. © and Eq. © in 
section 2. We analyze the case of polarization encoding, 
which uses the 1x4 coupler described in Fig. 5. The 
similar analysis can be also applied to the phase encoding 
case and obtains the same result. 

As we have mentioned in section 2, after the random 
phase modulating and encoding, the four coherent states 
input to the 4x 1 coupler are \e v 



\e ie CyjP f S ±) and \e l0d \jP ff%), when we assume Alice 
produces the H state. Let us denote a — \J P on § and 
/J = y/Poff 2 ■ After combining by the polarization beam 
splitters, we get two output coherent states written in 
the form of creation operators acting on vacuum states: 



|e^a) ff |e^), 



= /3) + |e^/3). 



► e 
e~ 

► e" 

e 
e 



- 1 .<- 



1 ^co (e«^aa^+e^a^r |n , 
J2n=0 ^ni 



■|0)i 



Z^m— m! 

-/9 2 V»oo /3 m (e ia cqt f + e ' fl dat / )'" , . 
l~>m=Q m! I U / J 

l^m=0 m \ \ U /B- 



(13) 

Where a* denotes the creation operator with the sub- 
script of different polarizations. And we also define e l8 <= = 

At = e 



and e 1 ^ 



n!m! 



r 1 v 



x(Cl)'-(4) s (^ 



+n (g t 4+Pj)"(g t B --P t H)'" 
n!m! 

E~= c;c^(-i)' 
PL) 



(15) 



Where and D' are the operators on path C and path 
D in the same form of A* or according to their sub- 
scripts, is the number of different combinations of 
choosing r terms at a time from n terms. 



Since we only consider the single photon state, we then 
trace off the subspace of path D and just retain the op- 
erators that produce single photon. Thus we derive the 
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single photon state pn at the output port as: 



dm = e -(« 2 +3/3 2 ) ( 



x[(Ciy(^T)!V^!) 2 
x(a 2 + 3p 2 ) n - 1 (2p 2 ) m (a 2 \H)(H\+ P 2 \V)(V\) 
+ (Ci iV /(^I)W) 2 

x(a 2 +3(3 2 y i {2(3 2 ) m - 1 (3 2 (\H)(H\ + \V)(V\)} 
x(^m\H)(H\ + ^,\V)(V\) 



+ ^(a 2 + Zfi 2 YW 2 T\{\H)(H\ + V)(V\)] 

_ -(a 2 +3/3 2 ) V-oo Mxj 

— e Z-/j=l\2J Z^n=0 

x{^TJ L ^(« 2 + 3 / 32 )"(2/ 32 )^" 

x[^fr I + 3^3*3(1^1 + I WD] 

+ #^(« 2 + 3/? 2 )"(2/3 2 r™I(|i/)(i/| + |V><V|)} 

-e-(«W) Er=i( |y(£W)i ( ^| i f ){jff | ) 

+ zuhv ^^;r l2p2 (&&\b)<h\) 

^ l^j=l\2> 0-1)! a^+3£i 2 2 

v oo /lW («lf3g!)£llM!. r^- I! 2 ^ I I 11 
TZ^l^J LU 1 ^a 2 +3/3 2 2 + 2J 



Where p„ oise _ 2 



1 = W^I + I^M^I N 

2 2 ' 

/3 2 is the normalizing factor, and r 



equals 



a 2 +3,3 2 R 2 

2 ' P "> llUlUltlllilllg I 

to the dehnition of extinction ratio in Eq.([T]). On the 
fourth step of this derivation, we make an approximation 
by neglecting the terms have coefficient (2(3 2 ) 1 with order 
higher than 1, under the assumption of /? <C a. Ignoring 
the normalizing factor, we can derive the single photon 
signal state as following: 



— r—1 1 4 

P signal — r _^_^Pideal T" r _i_^Pri 



(17) 



e -(a 2 +3/3 2 ) 

t 1 V'+i (" 2 + 3 / 32 ) 

^=0\2> .7! 



_ „_gjggr q» + 3 i 9' 



4/3 2 Ji 
a 2 +3^ 2 2J 



) 



x(- 



a 2 -ff 2 



= Ar.(r^|ff>< J ff| + 4 5 p : 



,4/9 2 J\ 
a^+3^ 2 2^ 

4 



(16) It is exactly Eq.Q in the main text. 
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